Lucene search

MitreCVE-2016-5230

HistoryJun 30, 2016 - 4:59 p.m.

CVE-2016-5230

2016-06-3016:59:04

CWE-264

mitre

web.nvd.nist.gov

cve-2016-5230

huawei

mate8

nxt-al

nxt-cl

nxt-dl

nxt-tl

permission bypass

security vulnerability

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.002

Percentile

58.7%

JSON

Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and control partial module functions via a crafted app.

Affected configurations

Nvd

Node

huaweimate_8Match-

AND

huaweimate_8_firmwareMatchnxt

VendorProductVersionCPE
huaweimate_8-cpe:2.3:h:huawei:mate_8:-:*:*:*:*:*:*:*
huaweimate_8_firmwarenxtcpe:2.3:o:huawei:mate_8_firmware:nxt:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	mate_8	-	cpe:2.3:h:huawei:mate_8:-:::::::*
huawei	mate_8_firmware	nxt	cpe:2.3:o:huawei:mate_8_firmware:nxt:::::::*

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20160520-01-smartphone-en

www.securityfocus.com/bid/91554

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.002

Percentile

58.7%

JSON

Related for CVE-2016-5230